CVEvulnerability

CVE-2020-36602

6.1 MEDIUM Published 2022-09-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-125, CWE-787

Description

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause out-of-bounds read and write.

Affected configurations

• huawei 576up005 hota-cm-h-shark-bd firmware 1.0.0.576 • huawei 577hota-cm-h-shark-bd firmware 1.0.0.577 • huawei 581up-hota-cm-h-shark-bd firmware 1.0.0.581 • huawei 586-hota-cm-h-shark-bd firmware 1.0.0.586 • huawei 588-hota-cm-h-shark-bd firmware 1.0.0.588 • huawei 606-hota-cm-h-shark-bd firmware 1.0.0.606 • huawei bi-acc-report firmware 1.0.0.1 • huawei bi-acc-report firmware 1.0.0.2 • huawei bi-acc-report firmware 1.0.0.3 • huawei bi-acc-report firmware 1.0.0.4 • huawei bi-acc-report firmware 1.0.0.5 • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp11\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp15\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp17\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp21\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp27\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp29\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp31\) • huawei cm-h-shark-bd firmware 1.0.0.66\(vn2-sp33\) • huawei cm-h-shark-bd firmware 1.0.0.106 • huawei cm-h-shark-bd firmware 1.0.0.116 • huawei cm-h-shark-bd firmware 1.0.0.202 • huawei cm-h-shark-bd firmware 1.0.0.208 • huawei cm-h-shark-bd firmware 1.0.0.216 • huawei cm-h-shark-bd firmware 1.0.0.226 • huawei cm-h-shark-bd firmware 1.0.0.228 • huawei cm-h-shark-bd firmware 1.0.0.510 • huawei cm-h-shark-bd firmware 1.0.0.520 • huawei cm-h-shark-bd firmware 1.0.0.522 • huawei cm-h-shark-bd firmware 1.0.0.566 • huawei cm-h-shark-bd firmware 1.0.0.576 • huawei cm-h-shark-bd firmware 1.0.0.578 • huawei cm-h-shark-bd firmware 1.0.0.586 • huawei cm-h-shark-bd firmware 1.0.0.588 • huawei cm-h-shark-bd firmware 1.9.0.208 • huawei cm-h-shark-bd firmware 1.9.0.216 • huawei cm-h-shark-bd firmware 1.9.0.226 • huawei cm-h-shark-bd firmware 1.9.0.228 • huawei cm-h-shark-bd firmware 1.9.0.510 • huawei cm-h-shark-bd firmware 1.9.0.520 • huawei cm-h-shark-bd firmware 1.9.0.522 • huawei cm-h-shark-bd firmware 1.9.0.566 • huawei cm-h-shark-bd firmware 1.9.0.578 • huawei cm-h-shark-bd firmware 1.9.0.586 • huawei cm-h-shark-bd firmware 1.9.0.588

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-787 Out-of-bounds Write weakness

References